Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: OY3cEM2KBIKtLL0gMrqCtT4TZAxCOLbx+fhFAfX7uFo=
Subject key identifier: D6:85:2A:7D:8A:1E:8D:68:47:2B:DA:7E:5F:6D:51:E1:79:7B:9F:32
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019F94A48D8897ED9F94CB2BBB2A80909800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 15:00:39 +0000
Manifest this update: Fri 24 Jul 2026 15:00:39 +0000
Manifest next update: Sat 25 Jul 2026 15:00:39 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: n76QuHxVyzNm29CdYiibCudrOBVcopnvJak0ql959Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:8d:88:97:ed:9f:94:cb:2b:bb:2a:80:90:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jul 24 15:00:39 2026 GMT
Not After : Jul 25 15:00:39 2026 GMT
Subject: CN=d6852a7d8a1e8d68472bda7e5f6d51e1797b9f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:b7:e6:7e:dd:af:99:93:a5:2e:72:4c:27:
40:9c:2f:e5:b4:06:12:9b:f5:b2:9f:98:42:c2:b2:
5d:ab:7b:57:4d:1b:d6:38:0b:c1:67:ec:67:17:47:
33:07:63:b0:fd:2d:7a:11:78:c4:d1:44:9b:db:0e:
bf:0b:40:45:20:3e:34:58:38:52:4b:00:2f:11:4a:
00:12:34:67:c4:6d:9b:c8:39:2f:fa:31:35:2f:35:
03:59:1f:f9:73:58:e7:ea:12:8c:00:9a:24:17:9a:
cf:55:92:75:51:72:36:c7:30:00:fd:a7:f7:e4:55:
2b:52:d3:d2:b5:b2:aa:d8:da:3d:99:7c:71:71:03:
a4:72:3c:8f:dc:8b:99:30:d6:e1:c2:fc:01:60:81:
94:1a:82:6c:86:0f:30:db:9d:a9:31:d9:e8:ea:10:
5a:52:67:34:0f:41:bb:15:75:02:51:d8:f2:84:ad:
a8:07:e0:1d:7f:19:34:ca:4a:89:d8:8a:a0:62:f7:
12:f1:f1:6a:4d:f9:09:89:c3:27:77:b5:1d:27:a1:
60:52:3a:79:95:55:66:de:9d:22:a9:ab:bd:88:96:
ad:75:37:ae:a1:1e:5a:46:34:0e:be:05:70:57:c8:
ee:ea:ec:dd:7d:63:0d:9b:3e:51:a2:c3:d5:7c:c3:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:85:2A:7D:8A:1E:8D:68:47:2B:DA:7E:5F:6D:51:E1:79:7B:9F:32
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:eb:4f:b0:af:8b:de:94:14:23:e3:0d:8a:47:06:28:07:4b:
4b:63:30:0a:9f:0b:0f:93:d3:6b:d7:f5:ac:d2:0d:00:04:e3:
72:f7:e2:ac:4d:78:48:91:55:ef:d4:01:f3:a6:86:85:92:69:
0b:51:c3:aa:2d:4c:6f:e1:b1:12:eb:de:c0:90:e1:1b:39:9e:
08:20:5f:ea:39:3f:ef:56:0a:dd:2b:64:50:23:c8:65:14:1f:
cd:18:6e:77:f8:b8:51:7f:6c:98:04:fd:03:04:ee:7e:b5:e8:
e3:d4:67:26:3d:5f:e2:d5:d6:94:ff:ea:41:96:bd:e4:1b:61:
fb:a0:e7:8f:02:c2:27:56:48:e7:fa:88:a8:08:8b:94:62:a1:
ac:b9:35:08:76:07:c7:a4:77:eb:98:11:51:cc:7d:49:a5:50:
27:93:7b:62:72:8a:fd:b5:bf:3e:11:88:62:a4:8f:ab:56:e4:
ca:2b:de:f5:7a:2f:1d:d4:e3:ee:fd:b8:41:9b:bc:c8:f7:c3:
fd:ed:e5:48:9b:59:e3:1f:d6:4d:c6:c2:a3:4f:f5:9d:32:00:
83:36:62:8a:3a:93:aa:ad:0e:b5:52:de:75:cf:35:02:41:db:
e7:8b:a8:ab:01:bd:a7:ab:49:fd:7a:fc:2f:f9:1d:49:7d:8f:
53:ce:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:10 2026 by rpki-client